CVE-2024-20434

Summary

CVE-2024-20434 is a vulnerability affecting Cisco IOS XE Software that allows unauthenticated, adjacent attackers to cause a denial of service (DoS) on the control plane of impacted devices. This vulnerability stems from the software's improper handling of frames containing VLAN tag information. An attacker can exploit this issue by sending specially crafted frames to an affected device, leading to an unresponsive control plane. The device will become inaccessible via console, CLI, ping requests, SNMP requests, or other control plane protocols. However, traffic passing through the data plane remains unaffected. A device reload is necessary to restore control plane services.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.